This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/3347f7-5259-4238-adb6-835de0f5892e/1/x24D_30L_eMoOcKP7IHGJ1wE0z8.mft File: x24D_30L_eMoOcKP7IHGJ1wE0z8.mft (raw, json) Hash identifier: Za1rSM1zigzrLKozD7xlZpPEqfnDOT1KJiWhZMYWQp4= Subject key identifier: 8E:F4:F3:42:72:3C:E4:97:2D:F0:97:E2:81:84:AE:72:D3:E0:22:12 Authority key identifier: C7:6E:03:FF:7D:0B:FD:E3:28:39:C2:8F:EC:81:C6:27:5C:04:D3:3F Certificate issuer: /CN=c76e03ff7d0bfde32839c28fec81c6275c04d33f Certificate serial: 019B454A5DB9974379ADED81EDAE04870398 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x24D_30L_eMoOcKP7IHGJ1wE0z8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/3347f7-5259-4238-adb6-835de0f5892e/1/x24D_30L_eMoOcKP7IHGJ1wE0z8.mft Manifest number: 178F Signing time: Mon 22 Dec 2025 09:01:00 +0000 Manifest this update: Mon 22 Dec 2025 09:01:00 +0000 Manifest next update: Tue 23 Dec 2025 09:01:00 +0000 Files and hashes: 1: N35ogLyeBi2BuFWlUXcGcxqHzqk.roa (hash: KCN204MjqT3ieOgIgu9cP0A/BCFFBOWU+ExI90E1Oec=) 2: gMMT4CFkCWRYtDrF3UxIZfPsxKc.roa (hash: 2/OhbtZSnC9mHzUn7UoTXNOmX1wP26fthpipUmjf41Y=) 3: x24D_30L_eMoOcKP7IHGJ1wE0z8.crl (hash: 3K5nWPjLnOyNIBJpsWoG86sRsI5eoHBOjU2l6OdApcY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/3347f7-5259-4238-adb6-835de0f5892e/1/x24D_30L_eMoOcKP7IHGJ1wE0z8.crl rsync://rpki.ripe.net/repository/DEFAULT/58/3347f7-5259-4238-adb6-835de0f5892e/1/x24D_30L_eMoOcKP7IHGJ1wE0z8.mft rsync://rpki.ripe.net/repository/DEFAULT/x24D_30L_eMoOcKP7IHGJ1wE0z8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 23 Dec 2025 09:01:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:45:4a:5d:b9:97:43:79:ad:ed:81:ed:ae:04:87:03:98 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c76e03ff7d0bfde32839c28fec81c6275c04d33f Validity Not Before: Dec 22 09:01:00 2025 GMT Not After : Dec 23 09:01:00 2025 GMT Subject: CN=8ef4f342723ce4972df097e28184ae72d3e02212 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:9a:09:ac:e4:a7:b5:45:2c:51:4d:0d:8b:ba: 58:ea:dc:dc:e6:90:bd:df:2f:ab:64:19:5d:60:60: ec:b8:88:54:76:02:9e:51:69:42:80:90:bb:3e:61: f9:24:66:1b:c6:eb:12:88:7e:2d:2c:92:48:e7:8c: 2d:fd:87:88:ec:ab:19:2b:a4:2e:ed:7f:fb:db:d6: 13:c4:a3:e9:44:e0:00:20:25:ba:e3:7b:05:e0:95: a4:d8:4d:56:68:f6:fe:fd:b2:9e:22:01:0b:72:be: ea:51:09:5c:cf:eb:f9:af:8d:50:0a:d4:8b:61:7e: d9:cd:73:d3:1f:66:a5:a8:23:09:09:b9:34:5e:25: a3:27:15:47:09:a7:72:7d:ef:0d:83:fd:3e:d1:de: a6:b8:40:e5:70:bd:87:63:8d:70:98:42:97:fa:b9: e9:95:51:a2:41:42:2f:ed:82:31:e4:df:bf:58:e4: b8:90:fb:11:ed:bb:2c:86:55:ab:08:03:eb:03:32: 0f:21:85:32:16:ce:63:7c:30:36:ef:40:d1:7c:a6: 0e:4c:05:d4:c8:cc:bc:c8:1f:cb:44:c8:87:3c:6d: 96:f3:37:77:2c:fb:28:58:08:95:c6:f4:6f:5d:5f: e5:71:01:00:f1:8f:d5:b5:bb:65:95:4a:33:08:82: 2d:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:F4:F3:42:72:3C:E4:97:2D:F0:97:E2:81:84:AE:72:D3:E0:22:12 X509v3 Authority Key Identifier: keyid:C7:6E:03:FF:7D:0B:FD:E3:28:39:C2:8F:EC:81:C6:27:5C:04:D3:3F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x24D_30L_eMoOcKP7IHGJ1wE0z8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/3347f7-5259-4238-adb6-835de0f5892e/1/x24D_30L_eMoOcKP7IHGJ1wE0z8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/58/3347f7-5259-4238-adb6-835de0f5892e/1/x24D_30L_eMoOcKP7IHGJ1wE0z8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 10:a6:20:16:57:76:e5:5f:3a:e0:73:a8:a4:b8:a1:bb:ec:90: 05:89:8a:68:06:61:88:27:37:46:8e:ef:45:21:0a:48:60:51: ad:d6:fb:fe:44:cf:23:48:c1:c7:3e:80:4b:bf:2f:bf:59:fe: 21:04:59:5f:10:b6:2c:23:7f:60:8d:21:56:d4:41:ca:2f:fe: 7e:b4:ef:9d:5e:e0:c6:58:d1:c9:c6:e0:f4:95:e3:5f:d0:17: 56:05:87:a5:c0:2b:b1:d7:60:68:ff:a9:a8:bd:6d:1b:c2:d5: 36:8b:60:cd:2b:49:b2:f2:7d:3f:5c:93:09:1c:7a:72:1a:81: 92:50:45:3d:61:f8:4b:56:e6:c0:93:90:83:cb:4f:d9:7a:0b: 58:1c:71:89:a6:25:53:be:e9:01:12:e2:34:e1:b9:60:c0:00: 2d:44:64:bc:47:f0:30:04:6f:3e:ef:a5:ff:e6:86:f6:33:b9: 8d:77:50:7d:64:e0:26:63:2c:ee:d1:fd:bd:cb:a8:10:c5:f3: 83:e6:21:45:22:6e:d5:6f:8e:e5:86:db:39:e5:43:84:87:6c: 84:e4:a9:32:b0:11:44:fa:50:53:dc:75:c4:9f:14:fa:2f:d7: 3d:4c:9c:46:53:1d:19:0f:04:23:3f:dd:ff:bb:1c:82:57:86: fc:20:2d:e9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtFSl25l0N5re2B7a4EhwOYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM3NmUwM2ZmN2QwYmZkZTMyODM5YzI4ZmVjODFjNjI3NWMw NGQzM2YwHhcNMjUxMjIyMDkwMTAwWhcNMjUxMjIzMDkwMTAwWjAzMTEwLwYDVQQD Eyg4ZWY0ZjM0MjcyM2NlNDk3MmRmMDk3ZTI4MTg0YWU3MmQzZTAyMjEyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq5oJrOSntUUsUU0Ni7pY6tzc5pC9 3y+rZBldYGDsuIhUdgKeUWlCgJC7PmH5JGYbxusSiH4tLJJI54wt/YeI7KsZK6Qu 7X/729YTxKPpROAAICW643sF4JWk2E1WaPb+/bKeIgELcr7qUQlcz+v5r41QCtSL YX7ZzXPTH2alqCMJCbk0XiWjJxVHCadyfe8Ng/0+0d6muEDlcL2HY41wmEKX+rnp lVGiQUIv7YIx5N+/WOS4kPsR7bsshlWrCAPrAzIPIYUyFs5jfDA270DRfKYOTAXU yMy8yB/LRMiHPG2W8zd3LPsoWAiVxvRvXV/lcQEA8Y/VtbtllUozCIItzwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFI7080JyPOSXLfCX4oGErnLT4CISMB8GA1UdIwQY MBaAFMduA/99C/3jKDnCj+yBxidcBNM/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveDI0RF8zMExfZU1vT2NLUDdJSEdKMXdFMHo4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OC8zMzQ3ZjctNTI1OS00MjM4LWFkYjYt ODM1ZGUwZjU4OTJlLzEveDI0RF8zMExfZU1vT2NLUDdJSEdKMXdFMHo4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81OC8zMzQ3ZjctNTI1OS00MjM4LWFkYjYtODM1ZGUwZjU4OTJl LzEveDI0RF8zMExfZU1vT2NLUDdJSEdKMXdFMHo4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEKYgFld2 5V864HOopLihu+yQBYmKaAZhiCc3Ro7vRSEKSGBRrdb7/kTPI0jBxz6AS78vv1n+ IQRZXxC2LCN/YI0hVtRByi/+frTvnV7gxljRycbg9JXjX9AXVgWHpcArsddgaP+p qL1tG8LVNotgzStJsvJ9P1yTCRx6chqBklBFPWH4S1bmwJOQg8tP2XoLWBxxiaYl U77pARLiNOG5YMAALURkvEfwMARvPu+l/+aG9jO5jXdQfWTgJmMs7tH9vcuoEMXz g+YhRSJu1W+O5YbbOeVDhIdshOSpMrARRPpQU9x1xJ8U+i/XPUycRlMdGQ8EIz/d /7scgleG/CAt6Q== -----END CERTIFICATE-----Generated at Mon Dec 22 14:31:28 2025 by rpki-client